Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier: A546uBZ/YXE0UvhsKg7MLXE9302E3cRR1rAo9fQfBEc=
Subject key identifier: B5:49:72:23:FF:02:9C:05:A4:FB:DA:E7:EB:0C:F7:2C:CC:F9:97:00
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 019759B695311A3605DA6DD91D22D9246BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 12:00:27 +0000
Manifest this update: Tue 10 Jun 2025 12:00:27 +0000
Manifest next update: Wed 11 Jun 2025 12:00:27 +0000
Files and hashes: 1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: 7STjwWM4PmXi9WCgjyvR6sFxiLreVQkLyyWui2J0g20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:95:31:1a:36:05:da:6d:d9:1d:22:d9:24:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Jun 10 12:00:27 2025 GMT
Not After : Jun 11 12:00:27 2025 GMT
Subject: CN=b5497223ff029c05a4fbdae7eb0cf72cccf99700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:59:99:13:61:f8:8a:3c:5c:71:70:ad:20:
55:ea:c6:5c:9b:73:f6:be:90:26:68:f7:36:35:ac:
d0:63:9a:5a:34:0b:fa:fe:11:ec:e8:30:24:61:0c:
49:1c:72:05:2b:b9:c2:bb:6f:52:a8:0a:d7:83:d9:
aa:0f:bd:68:b2:d2:36:6e:97:3f:37:a3:20:88:89:
8e:16:39:17:db:0d:63:7a:eb:93:20:40:97:57:51:
76:1c:d3:1c:1a:63:93:25:36:e6:42:92:ac:f0:93:
2c:15:99:f4:86:bf:8b:3f:b1:28:f4:c8:82:6b:c7:
04:af:3d:3a:a8:dd:8d:2f:42:ed:dd:80:2f:6f:e9:
61:81:c9:33:1d:27:6f:45:02:88:58:5a:3e:f8:12:
e4:85:21:50:57:88:9b:c3:ad:1d:fa:c2:88:d8:47:
e9:9d:26:84:e4:eb:39:d1:3c:91:f0:7d:4d:c2:c6:
33:a7:3a:04:c1:25:1e:92:7f:5f:dd:30:56:f8:2a:
7f:50:b8:e7:8e:94:af:65:33:27:83:2b:ec:e0:58:
c1:0a:b5:48:5c:b5:c1:b6:84:37:75:40:62:3a:c1:
72:99:57:c1:5f:1d:cb:e9:74:dc:1e:69:37:68:e6:
8b:16:53:d3:60:d1:d8:84:23:d8:6c:2d:e5:ed:6e:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:72:23:FF:02:9C:05:A4:FB:DA:E7:EB:0C:F7:2C:CC:F9:97:00
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7a:69:57:1c:b9:e8:94:a6:a9:14:b8:45:b7:fa:48:94:f1:
d3:3e:cd:af:db:7d:14:be:13:91:46:01:26:26:e3:d8:35:15:
72:cb:b8:0f:7f:9d:75:d3:bd:8c:63:53:ba:f6:58:e5:55:73:
36:65:0e:a9:58:92:a2:c8:5e:66:30:17:bc:9c:a4:e2:7e:8f:
08:c8:a6:95:36:5c:3d:18:39:8f:ad:9e:b6:43:06:63:a8:6e:
b9:54:b4:03:2d:af:cf:f1:f8:ce:1a:56:1e:3e:04:ea:8c:89:
2b:00:1a:af:d5:f1:db:57:e7:2d:cd:d6:ea:1a:aa:ad:1f:e5:
35:87:67:e4:9a:a8:18:8a:b9:6a:45:1f:18:d9:2f:9a:d7:28:
a4:70:0f:ba:74:41:77:86:b6:ce:9a:97:40:94:59:43:7a:7a:
cf:7c:4b:62:66:30:cb:d8:40:8a:51:67:8a:22:a1:25:ca:39:
4b:f0:1b:27:3b:ab:0b:8c:50:60:f4:ce:cd:42:44:f7:cb:a0:
98:b8:b0:b2:01:e8:41:07:da:10:30:16:5b:c7:d3:73:31:b9:
59:73:76:df:27:47:c1:c5:e1:df:60:c8:0d:7a:06:6b:30:45:
ff:6e:17:eb:cc:6c:66:56:50:88:a5:4b:b0:32:b8:ee:7a:33:
24:4c:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:12:49 2025 by rpki-client